W32.Phiskap.A
W32.Phiskap.A is a deadly virus that will infect various files like .doc, .docx and rtf. If executed, W32.Phiskap.A will search all local drives, removable drives and USB drives for these files and compress them with an .exe format. The modified files will contain malicious code and be moved to %Current Folder%\[original file name].exe.
Damage Level: Medium
Systems Affected: Windows 9x, 2000, XP, Vista, Windows 7
How to Remove W32.Phiskap.A:
FIRST AID TO STOP W32.Phiskap.A:
When W32.Phiskap.A virus infects a computer, it will modify system settings and inject itself to legitimate Windows files. System Restore is the tool-to-go-to in bringing back clean files and restoring earlier configuration. If you have saved previous restore point, please restore Windows to an earlier date.
MANUAL REMOVAL OF W32.Phiskap.A:
1. If an anti-virus program is present, update the definition file.
2. Reboot Windows in Safe Mode
- After turning on the power, press F8 on the keyboard.
- From the menu, select Safe Mode.
3. Run a full system scan and clean/delete all infected file(s).
4. Delete/Modify any values added to the registry if present.
- To edit the registry, click on Start. Search or Run regedit.exe.
Note: For a complete guide on Safe Mode and Registry Editor, please see tutorial links on the sidebar.
5. Exit registry editor and restart Windows.
ADDITIONAL TOOLS AND PROGRAMS:
Online Virus Scanner:
Another way to remove W32.Phiskap.A without the need to install additional anti-virus application is to perform a thorough scan with free Online Virus Scanner that is offered by legitimate computer security provider.
Scan with Norton Power Eraser:
A free removal tool from Norton Antivirus was developed to remove virus and unfamiliar threats without using the traditional AV signatures. Download the tool from this location and start scanning the computer for viruses.
Technical Details and Additional Information:
Other functionalities of this Virus:
- This Trojan can create directories and files.
- W32.Phiskap.A will provide duplicate malicious file of the original document.
Malicious Files Added by W32.Phiskap.A:
C:\NTsys.exe
C:\NTFILE.$$$
C:\konstruktor.txt